Adopt Trusted Publishing?

[newpavlov]

See https://crates.io/docs/trusted-publishing

We would need to adopt the provided CI config a bit to our needs, but it should not be a big issue.

Repositories:

• AEADs
• block-ciphers
• block-modes
• crypto-bigint
• elliptic-curves
• formats
• hashes
• hybrid-array
• JOSE
• KDFs
• KEMs
• key-wraps
• MACs
• nacl-compat
• PAKEs
• password-hashes
• ring-compat
• RSA
• rustls-rustcrypto
• signatures
• sponges
• SSH
• stream-ciphers
• traits
• universal-hashes
• utils

[tarcieri]

Sure, I’ve been curious to check it out

[newpavlov]

We now can switch crates to Trusted Publishing Only Mode, see: https://blog.rust-lang.org/2026/01/21/crates-io-development-update/#trusted-publishing-only-mode

[newpavlov]

I updated OP with the list of relevant repositories to track migration to Trusted Publishing.